Calypso Rolph ("Riverbend") is the data controller for the personal data described here. This notice explains what we collect, why, and what you can ask us to do with it.
What we collect and why
- Account details — email address, username, chosen avatar, experience level. Used to create and run your account (performance of our contract with you).
- Your fishing content — fly boxes, fly photos, trips, catches, notes and progress. Used to provide the service and sync it across your devices (contract).
- Messages to our AI helpers — your questions and any photos you upload. Used to generate answers and to keep your chat history (contract).
- Usage and device data — pages viewed, actions taken, approximate device and IP information. Used for security, fraud prevention and improving the app (our legitimate interest in running a safe, working service).
- Support messages — what you send us, so we can help (legitimate interest).
If you share a catch publicly, other users see only the fish, the photo and a rough area — never an exact location or your real name.
Who we share it with
- Service providers — hosting, database and AI processing suppliers who run parts of the service on our behalf.
- Paddle.com — our Merchant of Record for Riverbend Premium, who handles the sale, payment, invoicing, tax compliance and refunds.
- Professional advisers — legal or accounting, where needed.
- Authorities — where we're required to by law.
We do not sell your personal data.
International transfers
Some providers process data outside the UK/EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses to protect your data.
How long we keep it
We keep your account data while your account exists. Delete your account and we remove your content, apart from records we must keep — such as purchase and tax records, kept for as long as the law requires. Anything else is deleted or anonymised once it's no longer needed.
Your rights
You can ask for access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interests, and withdraw consent where we rely on it. Contact us through the app and we'll respond within one month. If you're unhappy, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
Security
We use appropriate technical and organisational measures — encryption in transit, access controls and per-account database rules so only you can read your own content.
Cookies and local storage
We use essential cookies and browser storage to keep you signed in and to remember progress on your device when you're not signed in. We don't use advertising cookies. You can clear them at any time in your browser settings, though you'll be signed out.